Abstract: Systems and methods for alert fixing. A method includes creating an entity graph based on correlations among software components of a software development infrastructure. The entity graph includes representing the software components. A software development pipeline is mapped in the entity graph by enumerating pipeline execution steps with respect to the software components of the software development infrastructure. Correlations between software components indicated in alerts are determined based on the entity graph. The alerts are deduplicated by matching between alerts between the alerts based on the correlations. One or more fix actions are generated based on the deduplicated alerts. The software development infrastructure is secured by causing implementation of the fix actions.

Abstract: Systems and methods for automating alert remediation. A method includes extracting entity-identifying values from cybersecurity event data included in alerts generated for a software infrastructure. Queries are generated based on the entity-identifying values. An entity graph is queried. The entity graph has nodes representing respective entities. The entities include software components of the software infrastructure and event logic components of cybersecurity event logic deployed with respect to the software infrastructure. Paths are identified in the entity graph based on the query results. Each identified path is between one of the software components and one of the event logic components. One or more root cause entities are identified based on the identified paths. A fix action plan is generated for the alerts based on the root cause entities.